        INSTALLATION NOTES AND OPERATING CONSIDERATIONS FOR
      THE FUTUREWARE HACKERTRACKER (HTRK) APPLICATION PROGRAM

GENERAL
The FutureWare HackerTracker (HTRK) application is a 32-bit program for
Windows 95/98/NT/2000/XP that scans a web server's log files for identification
of hacker attacks, including source IP Address capture, attack signature
collection, buffer overflow, and ordinary web site errors, that can be used to
generate several built-in reports, and source data for IP Address blocking at
the server.

The web server's logs must adhere to the standard World Wide Web Consortium's
(W3C) Extended Log file format, and specifically processes those log entries
that have a status of 4xx, 5xx, or UNK.

The HTRK application includes a set of common attack signatures that can be
added to during the examination of the log capture display section of the
application.

The HTRK application contains an integrated database that maintains captured
hacker IP Address, attack signatures, web site errors and other filtering
criterion.

The HTRK application can be used to manually for log processing, and can also
be operated automatically as a command script (e.g., as a scheduled task) that
the application can generate as one of its utility tools.
using the FutureWare AppLock methodology for enhanced security.


INSTALLATION
This version of the HTRK application is distributed as a ZIPed file, using
WinZip 8.0, and encapsulates an InstallShield wizard that can be started by
running the SETUP.EXE program, and includes a standard Windows UnInstall
utility. When unziping this program, the setup and supporting installation
files are placed in the TEMP folder by default, but the ZIPed file can be
placed in, and installed from, any folder. When the HTRK program is
installed, these installation programs and files can be deleted from the TEMP
folder, but MUST NOT be deleted if they are in the same folder as the
installation folder, otherwise the UnInstall utility will not work properly.


DEFAULT INSTALLATION DIRECTORY
Unless otherwise specified during the installation process, the directory in
which the HTRK application program is placed will be:

       C:\Program Files\FutureWare\HackerTracker

This directory will have one executable file, "fwhtrk.exe", which
encompasses all of the ordinary use processing and administration functions
for the application program. Additionally, the installation directory includes
the following files:

  FWHTRK_LICENSE.TXT
    The software license agreement under which the HTRK application can be
    used
  FWHTRK_REMITTANCE.TXT
    A remittance form used to obtain the RegistrationKey and Use License by
    regular mail
  FWHTRK_README.TXT
    This document
  HTRKHELP.HLP, HTRKHELP.CNT, HTRKHELP.GID
    Contains the application's context-driven Help subsystem
  FWHTRKCS.TXT
    A template used to make a command line interface script for processing
    logs unattended (e.g., as a scheduled task)
  FWHTRK10.FWA
    A configuration file that maintains various settings and configuration
    values chosen by the user. Information in this file is encrypted using the
    FutureWare AppLock for enhanced security.
  FWHTRK11.FWA
    An integrated database that maintains usage history of caught hackers,
    attack signatures, web site errors and other information used to generate
    the several reports that HTRK can print.
  FWLIBPKG.DLL
    The standard FutureWare utility library

Generally, the HTRK application is installed on the web server whose log
files will be scanned for possible attacks, but it can be installed anywhere
on a network, the only requirement being that it can access the web server's
log files.


STARTUP FOLDER
The HTRK program is not installed in the System's Startup folder.


SYSTEM REGISTRY
The HTRK program does not add to or use the system Registry, but the install
program will add an entry to the HKLM\Software hive. This will be removed by
the Un-Install facility. DO NOT ATTEMPT TO MAKE REGISTRY CHANGES MANUALLY.


REFERENCE DOCUMENT
The HTRK application's operation and administration is described in the
context-sensitive Help subsystem located in the same folder as the
executable, and is opened automatically when the application is run
for the first time, as well as when the application's Help menu item is
selected.


LICENSE PURCHASE AND REGISTRATION
A License for the HTRK application program must be obtained and registered
before the evaluation period expires, afterwhich the application program's
administration and usage will be restricted until it is subsequently
registered. This unlicensed state can be removed at any time by entering valid
"NameKey" "RegistrationKey" values obtained from FutureWare, either on its
secure eCommerce site (which requires a valid credit card), or by filling out
the included form (e.g., with NotePad) in the FWHTRK_REMITTANCE.TXT file and
mailing it with payment to the address indicated. The procedure for on-line
License purchase and registration is described in detail in the Help subsystem
under the headings "GetFutureWareLicense" and "ApplyFutureWareLicense".


UN-INSTALLING THE HACKERTRACKER APPLICATION PROGRAM
The distribution includes an Un-Install facility. We strongly recommend that
the HTRK application is first closed, any desktop shortcut deleted, and
all files other than those described above (if any) be deleted from the folder
that contains the executable before using the system's standard un-install
utility (e.g., the ControlPanel's Add|RemoveProgram item).

If the Windows removal utility warns that there are some components that
haven't been removed, then delete the HTRK folder (e.g., located by default at
C:\Program Files\FutureWare\HackerTracker.


THANK YOU!
Thank you for choosing this FutureWare product. We are always working to
improve our current products, and welcome comments and suggestions for making
this one even better. Please share your ideas and critiques with us be email
to hackertracker@futurewaredc.com.

